Skip to content
This repository has been archived by the owner on Sep 30, 2022. It is now read-only.

Latest commit

 

History

History
85 lines (59 loc) · 3.6 KB

appuio-specifics-public.rst

File metadata and controls

85 lines (59 loc) · 3.6 KB

APPUiO Public Platform Specifics

APPUiO is based on OpenShift Container Platform. This page describes APPUiO specific OpenShift configuration settings as well as features which were added to APPUiO that are not present in OpenShift.

Versions

  • Operating System: Red Hat Enterprise Linux (RHEL) 7
  • OpenShift Container Platform: 3.11
  • Docker: 1.13.1

You can download matching clients directly from APPUiO: :doc:`getting-started`.

URLs and Domains

Persistent Storage

APPUiO currently uses GlusterFS based persistent storage. For database data we provide Gluster volumes with storage class gluster-database to avoid :ref:`instability <faq-database>`, which makes use of optimized parameters. (Please set the storageClassName attribute in your PVC or StatefulSet manifest accordingly.) For now, volumes with the following sizes are available out of the box:

  • 1 GiB
  • 5 GiB

If you need larger volumes please contact us. All volumes can be accessed with ReadWriteOnce (RWO) and ReadWriteMany (RWX) access modes. Please see the official :openshift:`OpenShift documentation <dev_guide/persistent_volumes.html>` for more information.

Quotas and Limits

The quotas are defined in the project size you ordered. The exact numbers can be found on the product site APPUiO Public Platform

Pod count Recommendations

The technical Red Hat limit is 250 pods per node. Kubernetes however recommends a maximum of 100 pods per node. The maximum pod count per node is dependent on the workload. We recommend a maximum of 100 pods per node as you may face stability issues with a higher number of pods.

For further information on the Kubernetes and Red Hat pod limits please check the official Kubernetes and Red Hat documentation.

Secure Docker Builds

Usually Docker builds from Dockerfile have to be disabled on multi-tenant platforms for security reasons. However, APPUiO uses it's own implementation to securely run Docker builds in dedicated VMs: :ref:`appuio_docker_builder`

Let's Encrypt Integration

Let's Encrypt is a certificate authority that provides free SSL/TLS certificates which are accepted by most of todays browser via an automated process. APPUiO provides integration with Let's Encrypt to automatically create, sign, install and renew certificates for your Domains running on APPUiO: :doc:`letsencrypt-integration`

Email Gateway

To send emails to external entities, you should SMTP relay via the email gateway at mxout.appuio.ch.

To include the APPUiO email gateway in your existing SPF policy, you can include or redirect to spf.appuio.ch.

Example DNS record:

@ IN TXT "v=spf1 ... include:spf.appuio.ch ~all"

Or if you send emails for your domain exclusivly from appuio:

@ IN TXT "v=spf1 redirect=spf.appuio.ch"